diff --git a/windows/security/threat-protection/auditing/event-4716.md b/windows/security/threat-protection/auditing/event-4716.md index 64f3140ad0..3d1ec5f975 100644 --- a/windows/security/threat-protection/auditing/event-4716.md +++ b/windows/security/threat-protection/auditing/event-4716.md @@ -175,7 +175,32 @@ Subject: Logon ID: 0x3E6 ``` -After the event, one more event ID is generated: +After event 4716, you may see either event 4724 or event 4742 or both: + +``` +Log Name: Security +Source: Microsoft-Windows-Security-Auditing +Date: